android请求https(二)使用HttpClient 请求https

上一篇文章已经介绍了如何生成android 可以用的BKS的密匙，如果不会的请看我上一篇文章android请求https(一)生成BKS。

单向验证服务器证书

用于生成HttpClient

import java.io.InputStream;
import java.security.KeyStore;

import org.apache.http.HttpVersion;
import org.apache.http.client.HttpClient;
import org.apache.http.conn.ClientConnectionManager;
import org.apache.http.conn.scheme.PlainSocketFactory;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.impl.conn.tsccm.ThreadSafeClientConnManager;
import org.apache.http.params.BasicHttpParams;
import org.apache.http.params.CoreConnectionPNames;
import org.apache.http.params.HttpParams;
import org.apache.http.params.HttpProtocolParams;
import org.apache.http.protocol.HTTP;

import android.content.Context;
import android.util.Log;

public class HttpClientEx {
	private static final String KEY_STORE_TRUST_PATH = "suma.bks";// 客户端验证服务器端的证书密匙
	private static final String KEY_STORE_PASSWORD = "123456";// 客户端证书密码

	/**
	 * 
	 * @param reqTimeOutMs
	 *            请求超时时间
	 * @param ackTimeOutMs
	 *            回复超时时间
	 * @return
	 */
	public static HttpClient getNewHttpClient(Context context,
			long reqTimeOutMs, long ackTimeOutMs) {
		try {
			KeyStore trustStore = KeyStore.getInstance("bks");//KeyStore.getDefaultType() 默认JKS
			
			InputStream tsIn = context.getResources().getAssets()
					.open(KEY_STORE_TRUST_PATH);
			trustStore.load(tsIn, KEY_STORE_PASSWORD.toCharArray());

			SSLSocketFactory sf = new SSLSocketFactoryEx(trustStore);
			sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

			HttpParams params = new BasicHttpParams();
			HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_0);
			HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);
			// 请求超时
			params.setParameter(CoreConnectionPNames.CONNECTION_TIMEOUT,
					(int) reqTimeOutMs);
			// 读取超时
			params.setParameter(CoreConnectionPNames.SO_TIMEOUT,
					(int) ackTimeOutMs);

			SchemeRegistry registry = new SchemeRegistry();
			 registry.register(new Scheme("http", PlainSocketFactory
			 .getSocketFactory(), 80));
			registry.register(new Scheme("https", sf, 8443));

			ClientConnectionManager ccm = new ThreadSafeClientConnManager(
					params, registry);

			return new DefaultHttpClient(ccm, params);
		} catch (Exception e) {
			Log.d("suma", e.getMessage());
			return new DefaultHttpClient();
		}
	}
}

如果无需验证证书的话，只要把加载密匙代码改为以下就可以了 

trustStore.load(null, null);

import java.io.IOException;
import java.net.Socket;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.UnrecoverableKeyException;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.conn.ssl.SSLSocketFactory;

public class SSLSocketFactoryEx extends SSLSocketFactory {
	SSLContext sslContext = SSLContext.getInstance("TLS");

	public SSLSocketFactoryEx(KeyStore truststore)
			throws NoSuchAlgorithmException, KeyManagementException,
			KeyStoreException, UnrecoverableKeyException {
		super(truststore);

		TrustManager tm = new X509TrustManager() {

			@Override
			public java.security.cert.X509Certificate[] getAcceptedIssuers() {
				return null;
			}

			@Override
			public void checkClientTrusted(
					java.security.cert.X509Certificate[] chain, String authType)
					throws java.security.cert.CertificateException {

			}

			@Override
			public void checkServerTrusted(
					java.security.cert.X509Certificate[] chain, String authType)
					throws java.security.cert.CertificateException {

			}
		};
		sslContext.init(null, new TrustManager[] { tm }, null);
	}

	@Override
	public Socket createSocket(Socket socket, String host, int port,
			boolean autoClose) throws IOException, UnknownHostException {
		return sslContext.getSocketFactory().createSocket(socket, host, port,
				autoClose);
	}

	@Override
	public Socket createSocket() throws IOException {
		return sslContext.getSocketFactory().createSocket();
	}
}

代码是博主在网上查看资料后调通的，非原创。

生成HttpClient后怎么请求就不需要博主强调了吧，网上很多资料大家可以自己搜索，就和普通的http请求一样，多锻炼下查资料，调通代码的能力是很重要的。

附上一个资料地址内含双向请求验证Android HTTPS SSL双向验证